{
  "schema": "pdb.environment.real-agents.v1",
  "recorded_date": "2026-08-10",
  "scope": "trusted cooperative agent workspace isolation",
  "host": {
    "os": "macOS 26.6.1",
    "build": "25G76",
    "architecture": "arm64"
  },
  "implementation": {
    "backend": "full-copy",
    "ordinary_directory": true,
    "security_isolation": false,
    "excluded_administrative_roots": [
      ".git",
      ".pdb",
      ".pdb-host"
    ],
    "commands": [
      "pdb env",
      "pdb env NAME -c",
      "pdb env NAME",
      "pdb env NAME -- COMMAND",
      "pdb env NAME -p",
      "pdb env NAME -d"
    ]
  },
  "fixture": {
    "base_snapshot_id": "blake3-256:a8cd2ba7362ee2d906ac1751f66a41ae8ecb85f2f3f2272e9b5fae32b3e807ff",
    "environment_names": [
      "codex-proof",
      "claude-proof"
    ],
    "same_base": true
  },
  "attempts": [
    {
      "agent": "codex",
      "version": "codex-cli 0.142.5",
      "model": "gpt-5.6-sol",
      "result": "failed-before-mutation",
      "reason": "configured model required a newer Codex CLI"
    },
    {
      "agent": "claude",
      "version": "Claude Code 2.1.201",
      "result": "failed-before-mutation",
      "reason": "local Claude subscription credential required login refresh"
    },
    {
      "agent": "codex",
      "version": "codex-cli 0.142.5",
      "model": "gpt-5.4",
      "result": "pass"
    },
    {
      "agent": "claude",
      "version": "Claude Code 2.1.201",
      "result": "pass"
    }
  ],
  "verified_operations": {
    "read_pinned_base": true,
    "create": true,
    "edit": true,
    "delete": true,
    "rename": true,
    "symlink": true,
    "chmod_executable": true,
    "nested_directories": true,
    "environment_variable": true,
    "command_cwd": true,
    "reenter_after_agent_exit": true
  },
  "isolation": {
    "codex_saw_claude_output": false,
    "claude_saw_codex_output": false,
    "base_changed": false,
    "unrequested_package_json_changed": false,
    "environment_results_distinct": true
  },
  "timing_shape": {
    "environments_materialized_concurrently": true,
    "successful_agent_processes_concurrent": false,
    "codex_environment_dirty_before_claude_inspection": true
  },
  "result": "pass",
  "limitations": [
    "This proves workspace isolation for trusted cooperative agents, not hostile-code containment.",
    "The research command does not publish checkpoints, advance Environment heads, merge results, or replace Git history and remotes.",
    "Agent model and authentication failures are adapter/runtime concerns and occurred before filesystem mutation."
  ]
}